This commit is contained in:
Raven Scott
2026-04-04 16:39:15 -04:00
parent ef04e3a263
commit 8fbcc78199
87 changed files with 4295 additions and 808 deletions
+110 -2
View File
@@ -698,6 +698,114 @@ See also [kernel-extensions.md](kernel-extensions.md) and [package-bare-os-proto
---
## Giant phase kernel super-feature program (100 items)
## Kernel program backlog — tranche A (100 items)
Single-phase mega-kernel expansion: governance in [developer-guide/giant-phase-kernel-program.md](../../developer-guide/giant-phase-kernel-program.md), stock kernel boot hooks (**`BARE_OS_BOOT_SAFE_MODE`**, **`BARE_OS_BOOT_TRANSACTION_JOURNAL`**, **`BARE_OS_BOOT_CHECKPOINT`**), **`kernel.ext.d`** ordering fields **`requires`** / **`after`** / **`before`**, **`/proc/bare_os/giant_phase_program.json`**, **`/bin/kernel-doctor`**, **`/bin/kernel-explain`**, scripts **`verify-giant-phase-doc.mjs`** + **`giant-phase-benchmark-harness.mjs`**. **`bareOsCtxApiVersion` `1.23.0`**: optional **`subsystems.kernel.giantPhase`** on **`bareOsPublishBootReady`** payloads.
Governed kernel expansion: [developer-guide/kernel-program.md](../../developer-guide/kernel-program.md), stock kernel boot hooks (**`BARE_OS_BOOT_SAFE_MODE`**, **`BARE_OS_BOOT_TRANSACTION_JOURNAL`**, **`BARE_OS_BOOT_CHECKPOINT`**), **`kernel.ext.d`** ordering fields **`requires`** / **`after`** / **`before`**, **`/proc/bare_os/kernel_program.json`** (legacy **`giant_phase_program.json`**), **`/bin/kernel-doctor`**, **`/bin/kernel-explain`**, scripts **`verify-kernel-program-doc.mjs`** + **`kernel-program-benchmark-harness.mjs`**. **`bareOsCtxApiVersion` `1.25.0`**: optional **`subsystems.kernel.programProc`** on **`bareOsPublishBootReady`** payloads.
## Kernel program backlog — tranche B (100 items)
Second tranche of the same governed program. Traceability: [developer-guide/kernel-program.md](../../developer-guide/kernel-program.md), **`/proc/bare_os/kernel_program.json`** schema **2**, `bareOsCtxApiVersion` **1.25.0**.
| # | Item | Status |
| ---: | --- | --- |
| 1 | Named boot stages in journal and boot.json | done |
| 2 | Tiered boot.policy.json policyFallbackPaths merge | done |
| 3 | Boot rollback marker /run + BARE_OS_BOOT_ROLLBACK_APPLY | done |
| 4 | Boot bundle digest gate (policy + env hex) | done |
| 5 | ABI negotiation BARE_OS_REQUIRE_CTX_API_MIN vs bareOsCtxApiVersion | done |
| 6 | Initd admission hints from policy → env caps | done |
| 7 | Boot dry-run BARE_OS_BOOT_DRY_RUN skips execLine/extensions | done |
| 8 | kernel-boot-diff compares boot-checkpoint NDJSON | done |
| 9 | kernel.d ConditionEnvironment guards (comment lines) | done |
| 10 | boot.policy.schema extension keys + handbook boot doc | done |
| 11 | Import map template for extensions (doc) | done |
| 12 | bare_module_resolution.json refresh (existing proc) | done |
| 13 | Dual-target manifest row policy bare-only|dual|host-delegate-only | done |
| 14 | Lazy preload BARE_OS_BUNDLE_PRELOAD_LAZY_JSON merged hint | done |
| 15 | Sandbox profile registry proc sketch env | done |
| 16 | Resolution failure remediation codes (doc) | done |
| 17 | Loader audit NDJSON cap-gated /run path | done |
| 18 | Lockfile transitive allowlist env sketch | done |
| 19 | kernel-manifest-validate /bin helper | done |
| 20 | node-to-bare-modules dev guide cross-links | done |
| 21 | Supervisor restart classes in initd units (always|on-failure|no) | done |
| 22 | Session / job-control ids (document limits) | done |
| 23 | Signal map /proc bare_signals_profile alignment | done |
| 24 | Subprocess resource hints env for delegate | done |
| 25 | structured_clone_budget_v2 proc sizes/drops | done |
| 26 | /run/bare-os/services.json registry seed | done |
| 27 | IPC RPC token BARE_OS_IPC_RPC_TOKEN (existing) | done |
| 28 | CPU slice hints proc JSON env | done |
| 29 | IPC read watchdog timeout env sketch | done |
| 30 | initd docs in users-manual + kernel-extensions | done |
| 31 | Cross-drive transactional copy (doc + policy pointer) | done |
| 32 | Path ACL denyVfsPrefixes boot policy | done |
| 33 | Mount namespace simulation (doc) | done |
| 34 | vfs.watch debounce metrics_live coalesce env | done |
| 35 | Content-addressed /bin cache proc hit/miss env | done |
| 36 | kernel-fsck integrity walk stub | done |
| 37 | home snapshot tar stream stub command | done |
| 38 | Compression policy bare-zlib class env | done |
| 39 | Advisory lock personal-drive subset (doc) | done |
| 40 | POSIX appendix + troubleshooting VFS notes | done |
| 41 | bare-net/dns/tcp delegate capability + proc sketch | done |
| 42 | Egress policy v2 env JSON merge | done |
| 43 | Listener registry proc stub | done |
| 44 | DNS profile BARE_OS_DNS_PROFILE switch | done |
| 45 | bare-tls session cache hint proc | done |
| 46 | bare-http1 middleware hook doc | done |
| 47 | bare-ws devtools channel sketch | done |
| 48 | QoS tags net_qos_class reuse | done |
| 49 | Chaos latency BARE_OS_DELEGATE_CHAOS_MS dev-only | done |
| 50 | http-curl wget capability doc links | done |
| 51 | Key broker bareOsAcquireKeyHandle opaque stub | done |
| 52 | Keyring rotation schedule JSON env pointer | done |
| 53 | Secret buffer policy safe_sodium_buffer doc | done |
| 54 | Challenge-response execLine optional env | done |
| 55 | Elevation sudo allowlist /etc path doc | done |
| 56 | Config attestation hash proc env | done |
| 57 | Audit chain prevHash field env | done |
| 58 | Extension signing multi-signer pins policy vNext field | done |
| 59 | Entropy health urandom policy proc | done |
| 60 | Security ADR cross-links | done |
| 61 | Event bus bareOsEmitKernelEvent subscribe | done |
| 62 | ReadinessCommand initd subset readinessPath | done |
| 63 | kernel-triage crash bundle manifest | done |
| 64 | SLO wave11_operator_slo_v2 schema bump note | done |
| 65 | Anomaly execLine spike telemetry field env | done |
| 66 | Circuit breaker delegate failures env JSON | done |
| 67 | Playbooks /etc/bare-os/playbooks.d trusted doc | done |
| 68 | OTel resource attributes kernel env JSON | done |
| 69 | Retention hints /var/log job env | done |
| 70 | Telemetry schemas + ops manual updates | done |
| 71 | A/B channel names bareOsSystemRevision extended env | done |
| 72 | Signed component manifest triple env sketch | done |
| 73 | kernel-preflight caps+policy check stub | done |
| 74 | Partial /lib/bare refresh path doc | done |
| 75 | Pear lockfile at booter boundary doc | done |
| 76 | Rollback reason codes seed RPC adjunct doc | done |
| 77 | kernel/migrations/*.js runner doc | done |
| 78 | Selftest profile BARE_OS_KERNEL_SELFTEST=upgrade | done |
| 79 | Provenance report JSON for support bundle | done |
| 80 | compat matrix + release checklist kernel program | done |
| 81 | kernel-doctor initd delegate module sections | done |
| 82 | kernel-explain boot_policy_fail cap_mismatch codes | done |
| 83 | Shell completion metadata from commands.mjs gen | done |
| 84 | Profile env bundles /etc examples doc | done |
| 85 | man see-also capability words (doc) | done |
| 86 | Extension scaffold pear create doc | done |
| 87 | Integration harness npm script pattern doc | done |
| 88 | BARE_OS_DELEGATE_TRACE unified log format env | done |
| 89 | Machine-readable capability map JSON proc | done |
| 90 | Developer-guide cookbook pointer | done |
| 91 | kernel-program-benchmark-harness boot timings | done |
| 92 | VFS microbench script stub | done |
| 93 | IPC ping-pong booter test augmentation | done |
| 94 | Network mock bench DNS/TCP policy path | done |
| 95 | bare-crypto microbench script host stub | done |
| 96 | Compat verifier kernel program proc schema vs code | done |
| 97 | Fuzz boot policy JSON harness | done |
| 98 | Chaos safe-mode rollback integration test doc | done |
| 99 | Release gate benchmark regression script | done |
| 100 | Roadmap tranche B table + verify-kernel-program-roadmap-table.mjs CI | done |